This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json) Hash identifier: 659hBMhMqk29KRFtMfXVM8qiv6ZFRJ4gPtqCzyi9MjA= Subject key identifier: 01:5C:53:BB:58:59:92:6F:1A:03:84:44:94:C2:73:94:A6:5C:A0:AC Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8 Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8 Certificate serial: 019AF3C054F9F44B05B3CF218AB9710E6532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft Manifest number: 0AD2 Signing time: Sat 06 Dec 2025 13:00:59 +0000 Manifest this update: Sat 06 Dec 2025 13:00:59 +0000 Manifest next update: Sun 07 Dec 2025 13:00:59 +0000 Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: 2xRGoUYCT/0foMbPr1mNrvXFEOCmKcuZre1MRwNO22Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:54:f9:f4:4b:05:b3:cf:21:8a:b9:71:0e:65:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8 Validity Not Before: Dec 6 13:00:59 2025 GMT Not After : Dec 7 13:00:59 2025 GMT Subject: CN=015c53bb5859926f1a03844494c27394a65ca0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:b4:5d:b5:d2:f2:8c:65:48:2b:59:49:92: 71:aa:13:73:e3:f2:48:af:46:c9:fc:b0:1e:e5:c5: 59:91:82:65:9b:33:99:44:38:3a:a9:a7:56:2c:9a: 05:56:9a:bc:60:de:42:8c:dc:55:81:4f:2c:bb:eb: 0e:8d:20:c0:e8:21:c6:3b:51:3b:e8:65:eb:5d:26: 13:dd:43:a8:03:63:37:a6:15:9e:67:5a:e8:d9:e8: 36:bc:58:cf:ab:41:a0:50:3f:77:f3:83:7a:d9:90: f3:2e:b2:79:66:ed:1f:86:1c:e9:3d:7e:fd:71:cd: 2f:60:9c:3b:fa:81:78:62:a9:44:ed:07:b8:8f:64: d2:ce:3a:65:67:ca:24:32:b4:cf:93:c0:98:8a:6b: 2a:04:7b:43:ab:82:22:60:12:7f:c0:ae:09:a0:e7: 0f:57:e7:ca:f2:ba:f2:6a:63:f6:42:2b:91:3b:a1: b0:47:55:92:51:82:9a:1d:36:d6:45:51:79:32:4f: 1d:c4:78:b0:77:1c:06:94:cf:af:3d:76:8b:02:f4: 24:c4:fb:c4:f2:a9:92:4c:9f:68:eb:e8:e5:ae:19: 2c:1a:21:0b:14:86:6f:be:d0:b0:39:35:f1:b1:0b: 47:c5:49:c0:f6:7a:8c:9b:c4:10:4a:13:f6:8e:85: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:53:BB:58:59:92:6F:1A:03:84:44:94:C2:73:94:A6:5C:A0:AC X509v3 Authority Key Identifier: keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:83:49:7f:b8:8b:d1:1b:0a:67:7a:0e:9e:d1:91:6d:b1:76: 6a:f9:ee:f5:6b:25:e0:d3:41:83:9c:09:e9:01:df:f3:8c:17: 8d:33:e7:52:22:95:37:8b:2d:83:da:b9:9e:83:f1:5f:be:4e: 57:a7:52:88:25:40:37:56:ba:e9:a1:9d:3b:8c:2f:ef:c0:7b: 03:8c:a2:ad:b0:96:31:1d:f3:4b:32:b0:1a:1b:0b:df:b1:3a: 15:58:b4:df:f8:9b:be:13:7c:12:84:63:91:53:2a:5a:c2:5f: c0:9a:dd:3d:9a:b3:9e:d5:31:55:6e:44:c8:de:46:b8:15:04: 39:3a:2c:e8:ea:d9:dc:1f:14:0f:fe:51:df:75:ba:7f:37:52: c3:75:4d:16:fa:38:8b:78:0e:8d:2b:8b:b6:d5:25:18:89:11: c7:a7:10:bf:c3:ad:34:77:ce:72:a7:5d:1d:80:1c:9c:28:d9: 92:82:d9:7e:7e:ed:5c:5b:b8:bc:81:95:07:11:92:67:6c:87: 9d:de:8b:23:2e:2c:7b:87:ff:5b:29:d9:b4:c1:7c:4b:63:39: c7:4d:31:b6:44:44:76:52:78:1b:69:22:9e:26:67:84:53:3f: ce:96:01:aa:0b:b3:5c:76:a6:04:a8:1c:32:dc:05:e4:e3:c1: d9:e7:b9:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFT59EsFs88hirlxDmUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0 MzllYjgwHhcNMjUxMjA2MTMwMDU5WhcNMjUxMjA3MTMwMDU5WjAzMTEwLwYDVQQD EygwMTVjNTNiYjU4NTk5MjZmMWEwMzg0NDQ5NGMyNzM5NGE2NWNhMGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFO0XbXS8oxlSCtZSZJxqhNz4/JI r0bJ/LAe5cVZkYJlmzOZRDg6qadWLJoFVpq8YN5CjNxVgU8su+sOjSDA6CHGO1E7 6GXrXSYT3UOoA2M3phWeZ1ro2eg2vFjPq0GgUD9384N62ZDzLrJ5Zu0fhhzpPX79 cc0vYJw7+oF4YqlE7Qe4j2TSzjplZ8okMrTPk8CYimsqBHtDq4IiYBJ/wK4JoOcP V+fK8rryamP2QiuRO6GwR1WSUYKaHTbWRVF5Mk8dxHiwdxwGlM+vPXaLAvQkxPvE 8qmSTJ9o6+jlrhksGiELFIZvvtCwOTXxsQtHxUnA9nqMm8QQShP2joVNQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFcU7tYWZJvGgOERJTCc5SmXKCsMB8GA1UdIwQY MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3 LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJINJf7iL 0RsKZ3oOntGRbbF2avnu9Wsl4NNBg5wJ6QHf84wXjTPnUiKVN4stg9q5noPxX75O V6dSiCVAN1a66aGdO4wv78B7A4yirbCWMR3zSzKwGhsL37E6FVi03/ibvhN8EoRj kVMqWsJfwJrdPZqzntUxVW5EyN5GuBUEOTos6OrZ3B8UD/5R33W6fzdSw3VNFvo4 i3gOjSuLttUlGIkRx6cQv8OtNHfOcqddHYAcnCjZkoLZfn7tXFu4vIGVBxGSZ2yH nd6LIy4se4f/WynZtMF8S2M5x00xtkREdlJ4G2kiniZnhFM/zpYBqguzXHamBKgc MtwF5OPB2ee5og== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:32 2025 by rpki-client